Saturday, February 18, 2006

Abuse of TOR Networks

The abuse of TOR networks and the necessary actions taken
by Keesjemaduraatje

initially the TOR networks were meant as a anonymous network for dissidents. Messages where passed through several servers and delivered by so called outgoing servers.

More and more those networks are abused by spammers to deliver messages to forums an weblogs
The sender cannot be blocked and can change his ip-address every time he uses the TOR Network.
-------------------------------------------------------------------------
Case:
A dutch house-squatter and left wing activist, known as "Arie" , living in the neighbourhood of the Dutch city of Nijmegen, tries to convince a liberal weblog writer of his "truth". Specially the description of the left wing investigator Louis Seveke, who was murdered in 2005 by an unknown gunman, was against his principles. After some discussion he posted several postings on the weblog of www.keesjemaduraatje.web-log.nl calling the liberal writer a "crypto-fascist".

---------------------------------------------------------------------------------------
What can we do about it:
Every blocking of a message means you will find an IP-address. By entering this IP address in www.nic.com you will find the provider of this IP address. Most of the provider have a abuse email where you can report the abuse.

In my case I mostly found IP addresses of United States . I will report the IP address and send an abuse report.

------------------------------------------------------------------------------------------
example:
Request: 204.15.9.3
connected to whois.arin.net [69.25.34.144:43] ...

OrgName: FeBox LLC
OrgID: FEBOX
Address: 65 Cheyenne St
City: Tinton Falls
StateProv: NJ
PostalCode: 07712
Country: US

NetRange: 204.15.8.0 - 204.15.15.255
CIDR: 204.15.8.0/21
NetName: FEBOX-1
NetHandle: NET-204-15-8-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Allocation
NameServer: NS01.FEBOX.COM
NameServer: NS02.FEBOX.COM
Comment: http://www.FeBox.com
RegDate: 2005-08-01
Updated: 2005-09-19

RTechHandle: ATR16-ARIN
RTechName: ARIN Technical Role
RTechPhone: +1-908-517-5206
RTechEmail: arin@febox.com

OrgAbuseHandle: AAR30-ARIN
OrgAbuseName: ARIN Abuse Role
OrgAbusePhone: +1-908-517-5206
OrgAbuseEmail: abuse@febox.com


No comments:

Post a Comment

Bedankt voor jouw reactie. We beoordelen of de reactie geplaatst kan worden.